Acquire logon for Agentless (remote) data capture - syncsort_capacity_management - 12 - 12.40

Syncsort Capacity Management Installation Guide
Product type
Software
Portfolio
Integrate
Product family
Syncsort
Product
Syncsort Capacity Management
Version
12.40
Language
English
Product name
Syncsort Capacity Management
Title
Syncsort Capacity Management Installation Guide
Topic type
How Do I
Copyright
2023
First publish date
1985

The Agentless data capture provided by Acquire relies on Windows Management Instrumentation (WMI) for the capture of performance metrics. If you plan to use Acquire to capture data from remote systems using WMI, we strongly recommend that you install the Acquire so that it logs on with a local or domain administrator username.

It is possible to use a non-admin account for an Acquire that will use WMI but doing so requires additional security configuration on each remote system from which the capturing target system will obtain data.
  1. In Local Security Policy (or Group Policy as appropriate) check the User Rights Assignment for the Acquire user:

    • The Access this computer from the network privilege is set

    • Deny access to this computer from the network is not set.

      The default settings for these privileges should be OK.
  2. Run dcomcnfg.exe and ensure that the Acquire user has Remote Launch, Remote Activation and Remote Access permissions.
  3. Run wmimgmt.msc and ensure that the Acquire user has remote access to Root\CIMV2 and its sub-name­spaces.

In addition to this, if a WMI host system is part of a workgroup (that is, not a domain) then an additional registry entry may be needed to allow remote WMI connections.

The Microsoft web page describing the registry entry can be found at:https://msdn.microsoft.com/en-us/library/aa826699(v=vs.85).aspx

The entry written there is:
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
/v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

You must ensure adding this registry entry is acceptable to your environment and check that it remains valid for your version and edition of Windows. Precisely cannot advise you on this.